CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

LinkLogger 2.4.10.15 (syslog) Denial of Service Exploit

No description provided by source. !/usr/bin/perl LinkLogger 2.4.10.15 syslog DoS Tested against 2.4.10.15 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: 1. Based on code from http://www.pythonprasanna.com/Papers%20and%20Articles/Sockets/udpspoofpl.txt 2. The exact amount of packets to...

Cheap corporate network V1. 0 vulnerability analysis-vulnerability warning-the black bar safety net

QQ:7 9 5 8 6 0 0 products. the asp part of the code % pages=1 0 leixing=lcasetrimrequest"id" select case leixing case "big" anclassid=request"anid" set rs=server. createobject"adodb. recordset" rs. open "select from sort1 where anclassid="&anclassid,conn,1,1 if rs. bof and rs. eof then response...

CVE-2009-1898

CVE-2009-1898 affects IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35. The issue is that the secure login page in the Administrative Console does not redirect HTTP requests to HTTPS, enabling a remote attacker to read session contents by sniffing network traffic. Connected sources co...

Dust on the network enterprise website management system vulnerability-vulnerability warning-the black bar safety net

company. asp a get way to get the variable id's value is only filtered spaces and judgment Whether the value is empty contains an anti-note only the filter get way to pass the incoming parameter value company. asp it is request. querystring"id" that is not using the post And cookie injection but...

The times-the level of WEP crack full power slightly-vulnerability warning-the black bar safety net

With the rapid development of network technology and network applications, more and more, many users began to focus on network security. Believe the wired network to the wireless network in terms of security there is inherent, since the communication medium is a wireless signal, so the intruder c...

CVE-2008-4395

Removed by vendor...

CVE-2008-3613

CVE-2008-3613 affects Finder in Apple Mac OS X 10.5.2–10.5.4. The vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a search for a remote disk on the local network. The NVD entry records a base CVSS v2 score of 6.1 (M...

xeroxphaser-dos.txt

!/usr/bin/perl carved-out by: crit3rion, just making th3 world a b3tt3r plac3! XeroxRemoteDoS.20080801.ver01 tanx to dr0pz0N3 for reminding me to close my $&! s0ck3t Make: Xerox Model: Phaser 8400 Firmware: 03/03/2004 What's the deal? Apparently, if you send an empty packet to a Xerox Phaser 8400...

NX: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...

Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...

USN-610-1: LTSP vulnerability

Christian Herzog discovered that it was possible to connect to any LTSP client's X session over the network. A remote attacker could eavesdrop on X events, read window contents, and record keystrokes, possibly gaining access to private information...

DSA-1561-1 ltsp - information disclosure

Bulletin has no description...

wireshark HTTP dissector flaws

Unspecified vulnerability in the HTTP dissector for Wireshark formerly Ethereal 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted chunked messages...

[CSNC] OKI C5510MFP Printer Password Disclosure

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: OKI C5510MFP Printer Vendor: OKI Printing Solutions http://www.okiprintingsolutions.com/ Subject: Printer Reveals Password / Password and the configuration can be altered without authentication Risk: High Effect: Remotely exploitable Author:...

CVE-2007-6682

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

Stack overflow

Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long string in a .M3U file. NOTE: some of these details are obtained from third party information...

Zoidcom 0.6.x - Malformed Packet Denial of Service

// source: https://www.securityfocus.com/bid/25326/info The Zoidcom network library is prone to a denial of service vulnerability when handling malformed packets. An attacker could exploit this to crash a network service that is implemented with the library. / by Luigi Auriemma / include include...

USN-405-1: fetchmail vulnerability

It was discovered that fetchmail did not correctly require TLS negotiation in certain situations. This would result in a user's unencrypted password being sent across the network. If fetchmail has been configured to use the "sslproto tls1", "sslcertck", or "sslfingerprint" options with a server...

Province College entrance examination volunteer fill reporting system vulnerabilities-vulnerability warning-the black bar safety net

| Compiled by: education system of the College entrance examination......that Online fill volunteer to facilitate the majority of candidates, but the security on the negligence and vulnerability can also increase a lot of unnecessary trouble, this is to remind educators, Safety first. The provinc...